80K Records' Breached in Iowa Gaming Hack

Around 80,000 Iowa employee names, birth dates and social security numbers have been exposed after an Iowa Gaming Commission server was hacked. Read the full article. Secure Computing...

VMware Mega Patch Plugs Security Holes

Virtualization software specialist VMware has shipped a massive batch of critical security updates to cover 48 security holes in a wide range of its server and workstation products. According to an advisory from VMWare, the vulnerabilities affect the DHCP Server,DHCP Client, Service Console kerne...

CVE-2009-1978

creationtimestamp| type| source ---|---|--- 2009-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9652 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/oracle/osbexecqr2.rb 2025-02-06 03:13:39+00:00| seen|...

CVE-2009-2364

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9060 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15489 2010-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15569...

Small Pirates v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

TemaTres 1.0.3 (Auth Bypass/SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== TemaTres 1.0.3 Auth Bypass/SQL/XSS Multiple Remote Vulnerabilities ====================================================================...

Ubuntu Update for curl vulnerability USN-484-1

Ubuntu Update for Linux kernel vulnerabilities USN-484-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4841.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for curl vulnerability USN-484-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-484-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1028

creationtimestamp| type| source ---|---|--- 2009-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8180 2010-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12059 2011-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17210 2018-05-29...

Easy News Content Management (News.mdb) Database Disclosure Vuln

No description provided by source. Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP Script : Easy Content Management Publishing Script Site : http://easy-news.org/content-management-terns.asp Description : An easy to use ASP-based content management...

Easy News Content Management - Database Disclosure

Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP Script : Easy Content Management Publishing Script Site : http://easy-news.org/content-management-terns.asp Description : An easy to use ASP-based content management news system. Mulitple login levels...

CVE-2008-5353

creationtimestamp| type| source ---|---|--- 2008-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9948 2009-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8753 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16293 2011-01-08...

CVE-2008-4686

creationtimestamp| type| source ---|---|--- 2008-10-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6798 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6825...

CVE-2008-6082

creationtimestamp| type| source ---|---|--- 2008-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6753 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/titan626site.rb 2025-02-06 03:13:39+00:00| seen|...

wordpressmu-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - Security Advisory - - - WordPress MU 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability - - ----------------------------------------------------------------------- Product: Wordpress-MU multi-user Version: Versions prior to 2.6 are affected Url:...

CVE-2008-3008

creationtimestamp| type| source ---|---|--- 2008-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6454 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16521 2018-05-29 15:50:33+00:00| seen|...

CVE-2009-2762

creationtimestamp| type| source ---|---|--- 2008-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6397 2008-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6421 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9410...

Do not release details about securrity vulnerabilities until after the fix was available for a reasonable period of time

It is an unfortunate practice at Atlassian to as a part of release notes release all the information, often including example exploits|http://jira.atlassian.com/browse/CONF-9350, about security vulnerabilities that were fixed in the version being released. This gives us great headaches because: w...

CVE-2008-2703

creationtimestamp| type| source ---|---|--- 2008-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31889 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16814 2018-05-29 15:50:33+00:00| seen|...

CVE-2008-2568

creationtimestamp| type| source ---|---|--- 2008-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5743 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5833...